A User Centric Security Model for Tamper-Resistant Devices

A.9 Sirett-Mayes-Markantonakis (SM) Protocol
The SP sends the root certicate of the mobile phone's J2ME Operator domain. This
enables the SP to install its own MIDlet on the mobile phone that will assist it in the
applet installation on the SIM card (SC).
SM-2. SC → M → SP : SC i ||N SC
The SC will send its identity and a random number back to the SP via the M using the
Short Message Server (SMS). The SM protocol relies on the SMS to provide security to
certain messages.
On receipt, the SP use the SC identity to locate the long-term shared secret between the
SC and SP.
SM-3. SP → M : MIDlet SP ||Sign SP (MIDlet SP )
The SP then encrypt and MAC the applet that it wants to install on the SC. The encrypted
and MACed applet is then embedded in the MIDlet SP that the SP sends to the M that
installs it in the operator domain of the mobile phone. The MIDlet SP is signed by the SP
signature key that is certied by the root entity to the operator domain (i.e. Cert DRP C ).
SM-4. M → SC : e KSC−SP (Applet)||f KSC−SP (Applet)
Once the MIDlet SP is installed on the M it communicates with the SC and initiate the
applet download process which is described by the message 4.
239